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LI 

Arrangement and Method for Adapting Mobile Field Device 
Field of the invention 

ITiis invention relates to mobile field devices, euch ae field com- 
5 pulers anU iiialnlenariue devlucs. Espt^uialiy, Uie Irivenliuii relules lu applica- 
tions ttiat run in the mobile field devices. Furthermore, the invention relates to 
an arrangement for adapting the mobile field device to a use. 

Background of the Invention 

10 Public utilitids, such as munidpal electridty companies and water 

and sewerage utilities, (or corresponding private utilities) manage large and 
complex systems. The maintenance of the systems must be arranged effi- 
ciently.. A tradillunal way, Tor example in a munidpal eleulricily company, is 
that maintenance groups^ which belong to the company^s staffs loiow their 

15 area, and before performing tasl<s they go to the office of the company to get 
task ilsts and, if neededi necessary map sheets. If some unexpected tasks 
occur during the working day, the maintenance groups may be infonmed and 
instructed by using a radiophone,, mobile phone, nonmal telephone, or even a 
fex. It may also happen that new map sheets must be picked up from the of- 

20 flee. The conbnDl center can be infonmed about operations made in the field 
using tiie same ways. Alternatively, the operations can be written down on 
paper and transported to the office or the control center after the tasks are 
completed. 

Some public utilities may use mobile field computers, such as 
25 PDAs (Personal Digital Assistant), for Informing maintenance rnen in the 
field. However, the field pomputers must also be updated in the ofRce for the 
use of the day, before peribrming the tasks. A limited amount of Instruction 
data may be delivered fn the field computer via wireless communication, hut 
tanger data amounts are Impossible (or very unpractical) to transport since 
ijU the capacity of the wireless communication path is limited. After the tasks are 
performed, the field computers may be transported to the control center for 
updating the system in ar^cordance with the opRtations made 

FIG. 1 illustrates a simple example of an energy distribution net- 
work tn an area. Watercourses are marked wrth horizontal hatched lines and 
35 larger consumption areas with diamond hatched lines, i\/lain roads are also 
illustrated on the map. The power lines 4 are marked with dashed lines, 
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swfb:hfng stations 2 with circles, and supply translbrmers 3 with triangles. 
The generator 1 1s marked with a circle with an amplitude current mark. It can 
be induced firom the map that the distrfbutton network comprises a great 
number of dHforont dcmonts with thoir attributes , and poramotors. For oxm* 
5 pie, the energy distribution netwari( of a city of about one mtilion bihabltants 
may comprises 1,2-1,3 million targets (elements). The dat^i amount, whiich 
is needed to describe a network of this size, is approximately over 100 
Mbytes. 

iMowadays, a trend is that public utilities externalize, for example, 
to maintenance tasks. One company in the maintenance business may manage 
the maintenance of a very large area arid/or of several areas, whereby the 
maintenance men do not any mora know their areas and the networks. How- 
ever, the maintenance men work Vt\e same way as belbre: they pick up their 
duties before starting to work and transport information about the operations 
15 made after the work. A problem is that the ovimer of the public utility (or cor- 
responding private utility) may hot deeire to give all network information to the 
rnainli^riunue mw\ of exleiiial uoinpany. On Uie uUiei iidfid, Uie exlenmi 
maintenance company may desire to use the same field devices, so it may 
happen that the device may contain information from several different utlli- 
20 ties. The security of Information Is not as guaranteed as when tiie rnalhte- 
nuiiue men were in the service uf Uie uUlily. AihJ as inenUuried befoiu, U» 
huge amount of data of the systems te also a problem. 

The goal of the invention is to alleviate the atmv&'mentioned pnsb- 
iems. This is achieved in a way described in the claims. 

25 

Summary of ttie Invention 

According to the invention, a field mobile terminal, such as a PDA, 
is adapted to a use. The mobile terminal is provided with data., which is di- 
vided bnto several parts. Each part concerns data connected to a certahn 

30 area, and the data ot each part has been encrypted by using a specific en- 
cryption key or k^. The provision of data is a preliminary step for adapting 
the mdalle terminal and it may be done in an office of a public uijlity or a cor- 
responding organization. A decryptien key (or keys) is location specific. The 
decryption keys are in a special server. When a decryption ot a pari: (or parts) 

35 is needed, the server finds out the location of the mobile tenminai. This is 
rinne by asking for the location information from a. special lnc»tlnn information 



VAST.OTTO 



02-09-02 14:42 



l«ISTA- 



KENELLEPATREK Aslakaspaival SIVU 003 



2. Sep. 20C2 U:&& 



Nr. 1/6/ s. 4/1 




application in a ooiximumcation neiwork. The application utilizes the location 
infomiatlon of the mobfle! network, which is updated in the wireless network 
system, such as In a GSM network. AltemativBly, the location inlbnpation of 
the tnobile terminal may be delivered to the seiver automatically. 
5 If the location information of flie mobile terminal and the location 

infonriation of one of said decryption keys matches, the decryption key Is 
sent from the server to the mobile terminal preferably via a wireless commu*- 
nlcation path. The mobile terminal may now decrypt the data part in question 
for adapting the terminal for the use required. 

10 

Brief Description of the Drawings 

in tho fbliowing/tho invention is described In more dcteil by moans 
of FIGS 1 - 4 In the attached drawings where: 



15 FiG. 1 . Illustrates an exampje of an energy distribution network in an area 
level, 

FIG. 2 Illustrates an example of dividing the data of an energy distribution 

network Into parts^ which are location specific, 
FiG. 3 illustrates an arrangement according to the invention, and 
20 FIG. 4 illustrates a flow chart that shows an example of the inventive 

method. 

Detailed Description of the Invention 

Suitable data and software must be set up in the mobile field ter- 
25 minal, wiiich can, Tor example, be a field computer, rnubile rnairUenaiice de- 
vice, a PDA, or a mobile phone, to adapt it for use. Lets examine an example 
of a power distribution network illustrated In FIG. 1. If the networi^ information 
Is utilized in an efficient and inventive way according to the invention, it must 
be divided inlu seyerdi part^. Preferably, Ifie dlvi^iun rnay be based uci yeu- 
30 graphical areas, such as rectangles in a map or other geographically logical 
areas (valleys, mountains etc.)« but it may also be based on the structure of 
the distribution network - the area of a distribution substation may be a part. 
However, each part has always some location in a geographical map. 

FIG. 2 shows an example of the division of the power distribution 
35 network based on the rectangles 21. For example, rectangle B11 contains 
the infonfnation from one switching station 22, two supply transformers 23, 
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24i and the distribution fines 4 In the area of the rectangle. When mainte- 
nance men are in the area of B1 1 for perfonmlng their tasks, Ihey do not usu- 
ally need Infonnation from the other parts of the network - Just the infomnalion 
from part B11. The maintenance men carry the mobile field tennihal, which 

5 uufilains all inrunnaliun Trurn Uie dislribulion nelwurk, buL only Uie IrTrcrmatfon 
of part B1 1 is accessible. The maintenance men can do their tasks in the 
area of 811, and receive new tasks and send performed taslcs to the control 
center via a wirelese communication path. When they move to another area, 
fur example, to part A 12, the decryption i^ey of Ihe new area is accessible 

10 from the server, but the key of the old area B1 1 is no longer acc^ible. In 
this way« the mobile terminal is always adapted to the use In question. 

The divided (and encrypted) infonnation of the distribution network 
Is downloaded to the mobile terminal from a server, which conteiins the Infur- 
mation of the distribution network. Naturally, the server and the mobile termi- 

15 nal are connected to each other during the download. The connection can be 
a cable connection, a connection through a fixed network, or everi a connec- 
tion tlirough a wireless network. However, if the connection Is through a wire- 
less network, the time required for the download is very long depending on 
the low transmission capacity of the wireless network and the huge data 

20 amount of the network. The wireless solution may be reasonable at nights. It 
may be also needed to download special software for using and utilizing the 
network Infonmation. 

Each part of the network Information has been encrypted by a part 
specific key (or keys if the encryption is based on several keys). Also the 

25 special software may be divided, according to the division of the information, 
into parts, and encrypted as well. When maintenance of a certam network 
element in a certain area (part) requires special software, it Is accessible at 
the same timR as the infonnation needed Thft encryption may he based on 
key pairs and enough long bit codes etc. 

3U The encrypted information parts (and the pieces of software) make 

it possible that only the part or parts needed are accessible to the mainte- 
nance men necry|>tinn is needed for accessing the information needed. 
Since the encrypted information is connected to a oertalh area, l.e. location, 
the decryption key or keys are location specific* The encryption mechanism 

35 may be utilized as key pairs. (Other ways are possible as well.) I.e. the en- 
crypting key and decrypting key of a certain part perform as a key pair The 
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dect^ilon keys are not. in the mobile terminal, but they are In a special 
server fipom which they have to be transported to the mobile tenninal. in order 
to deliver the decryption key or keys needed, the locatton of the mobile ter- 
minal must be determined. When the location of the mobile terminal and the 

5 location information of the decryption key matches, the decryption key is 
transported to the mobile temninal wirelessly. in other wonds, the decryption 
key or keys, corresponding to the location of the mobile terminal, are trans- 
ported to the terminal for decrypting the information (and the piece of soft- 
ware) of the part of that location. When the tenninal moves away from the 

10 area the decryption key in the server may again become inaccessible! (The 
key is not delivered to the mobile terminal.) based on the location information 
that the mobile terminal gets from the networii systeni (the network system 
has to known the location of the mobile terminal). 

FIG. 3 shows an example of an Inventive anangement The server 

15 31. wherein the decryption keys 311 lie» preferably finds out tiie location of 
the mobile temitnal 32 from a location service 34 via a network 35, The ioca- 
Uuii beivice uUILdes Uie location inrormation system 33 of the network to 
which the mobile terminal Is connected, normally wirelessly. A very common 
system is the use of the location information system of the mobile networic, 

20 such as GSM or UMTS. So the location service gets location Information 
riurit Uiti iDcalion inronnalion system. 

The server ast^ for the location infonnation of the mobile terminal 
from the location service. As a response to this enqLiiry. tiie location service 
transports the location Information. Alternatively the server may ask for the 

25 location information frorn the mobile terminal itself, but this is not a recom- 
mended way, since It is not so secure. ( I he mobile tenminai should get its lo- 
cation information from the location information system 33 since the location 
information from the mobile terminal may be a fake.) It Is also pnsfsible that 
the location service (or the mobile terminal) automatically, wKhout any re- 

30 quest, bansports location intormation to the server, so that the sender always 
knows the locations of the mobile terminals that are under its sen^lce. 

A preferable way is that the mobile terminal asks for a deciyption 
key (or keys) from the server, which| as a response, finds the location of the 
mobile terminal, searches the right decryption Key, and transports it to tiie 

35 mobile tenminal. Naturally, in the case of an automatic delivery, no request is 
needed to be sent from the mobile terminal. 
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The mobile terminal comprises means 321 for decrypting the partes 
needed using the decryption key or I<ey8. Further, the mobile temiinal com- 
prises means 322 for adapting the mobile terminal for the use. This means 
that not only the decrypted information of the part is saved in the mobile ter- 

5 minal, but also IhB suriware neeUBd, and inaybe related runcUuns. are in- 
stalled. Furthermore, the mobile temiinal may comprise means for requesting 
the decryption key or keys from the server. 

The server oompriees the decryption keys 311 ^ as ment'oned be- 
fore, and means 312 for providing the mobile lemiinal wilti data, which Is di- 

10 vided into several parts, each part concerning data connected to a certain 
area, and s^d data of each part encrypted by a Ipcatton specific key. The 
providing means are connected to the nnobile terminal for the duration of the 
provision of data. Naturally the providing means may be in another element 
than the server. Further, the server comprises means 313 for finding out the 

15 location of the mobile terminal, means 314 for comparing the location Infor- 
matfon of the mobile terminal and the location information of said decryption 
Iceys, and selecting that decryption key (or keys) whose location infonnation 
and the location information of the mobile tenrninal match, and means 315 for 
sendinq the selected decryption key (or keys) from the server to the mobile 

20 terminal as a response to the actions of the connparing and selecting means 
314. 

Further, the means for finding out location information may com- 
prise means for requesting the location information of the mobile temriinai 
from a location service that is In connection with the server through a com- 

25 munlcation network, or ftom the mobile terminal, and means for receiving the 
requested information. 

FIG. 4 shows an example of the inventive method in a flow chart 
fomi. First the mnhiie tenminal Ls prodded 51 with data, whinh is divided Infn 
several parts, each part concerning data connected to a certain area, and 

30 said data of each part encrypted by a specific Key or keys. When the mobile 
temiinal has been provided with the Infonnation (and software) according to 
the Inventfon, the next step is taken for adapting tha terminal for thft use, 
preferably for the current use. The sen/er finds out 52 the location of the mo- 
bile terminal. In this step, the server may ask for the location information 

35 preferably from the location sen/ice, or the location information may be trans- 
ported to the server automatically. As mentioned, the server comprises the 
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location specific decryption keys. It the location fntormation ot the mobile 
terminal and the location infonnation of one of said decryption Iceys nnatohes, 
said deofyption key or keys are sent 53 from the server to the mobile termi- 
nal. In the mobile terminai, the part to which said decryption key matches is 

5 enaypted 54. And as mentioned, the adaptation of the mobile tenninai may 
contain other tasks along with the decryption function. 

It should be hnted that location information need not necessarily 
be the only criteria to check the validity to transport the decryption key from 
the server to the mobile terminal. Along with the location informatton, the de- 

10 crypUon key may also be associated with the idenUflcatlon of tiie mobile ter- 
minal and/nr time Infnrmatlnn. In this way. it is possible to dassify users in 
rnore detail and to inoreaee the security of tiie data. For example, if the mo- 
bile terminal belongs to a certain subcontractor, It may be desirable to givie 
him only a certain part of. the information, it may also desired that the infer- 

15 matton of the parts is accessible only during a certain period, ttien time in- 
formation Is needed for the decryption function: the information may be de- 
crypted In day time, but not in evenings or at nights for example. Naturally, 
combinations of different criteria may be used. 

The decryption function may not be restricted to one part of the in- 

20 formation, but it may be useful that several parts are also decrypted at tiie 
same time. For example. If the maintenance men are In the area of B11 m 
FIG. 2, and the sen/er has this tocatton infenmaUon, the maintenance men 
may be allowed to get an access to the parallel parts of B11 as well. i.e. to 
paris A11, C11, A12, B12, and C12. This is convenient to arrange t^y trahe- 

25 poriing tfie decryption keys of ttie parallel parts with the decrypUon key of 
B11. 

The invention makes it possible to use external maintenance com- 
panies in a safe way. The security of the inforrnation of a public utility (or pri- 
vate utility or another company) is high, since the information itself is not 

30 transported oyer a wireless communication path, but only the decryption key 
or keys of the Informatton allowed to be used, is transported. A suboontractor 
has ac(»5s only to the information needed for his duties. Anyway, wireless 
transmission of huge data amounts requires an unacceptable long period and 
is expensive as well. So. the invention saves the transmission capacity of the 

35 communication network as well and is an economical solution. It Is also rela- 
tively safe to ask for location Information trom a special location service. The 
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alternative is to asK the location InTbmiation from the moMe terminal, but 
then the security level is tower. So, the Information |s very quickly in the use 
of the subcontractor In a statAim way. 

Decryption k^s allow various different solutions. A numiaer of 

5 keys may concern the same area. One key decrypts a small subarea, an- 
other key a larger area, etc. Or one key deaypts certain information In the 
area and another key other Information. The decryption keys of several areas 
may be delivered at tiie same time, or several keys are needed for decrypting 
one area. , 

10 One applicaiton of the invention may be that when usir^ the Mentl- 

fication Infbrmatlori of the mobile terminal along with the k>cation infbnnation. 
oertain sensitive inforrnafion In the part may bo decrypted seporatoiy from ttio 
main decryption of the part of the inlbmnation. The sensitive inlbmiatfon is 
allowed only to the certain terminal or terminals. Other temnlnals can decrypt 

15 the inibnmatlon of the part, but without the sensitive material. As noted, the 
invention is for professional use, concorning maintenance actions of an or 
ganization, such as different public utilities, it is evident tliatthe Invention can 
be used in other ways than described in this text, so it can be used in many 
different solutions, in the scope of the inventive idea. 

20 
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Claims . 

1. A method for adapting a mobile terminal to a use, charac- 
terized in that the method comprises the prellminafy step of providing 
the mot>iie temninal with data, which is divided into several parts, each part 

5 concerning data connected to a certain area, and said data of each part en- 
crypted by a specific key or keys. 

tha pmviried'dafa beirns in the mobile termlnei the method irum- 
prising the steps of: 

- finding out a location of the mobile terminal by the server, the 
10 server cornprising location spedfic deciypQon keys. 

- If the incatinn infbrmetinn of the mobile terminal and tiie Incetinn 
infonnation of orte of saki decryption teys match, sending aaki 
decryption key or keys from tiie server to the mobile terminal, 
and 

15 - decrypting the part to vi^ich said decryptton key matches fbr 

adapting the mobile terminal for the use. 

2. A method acconjing to claim 1. characterized in that 
prior to sending the decryption key or keys, the mobile tenninal requests the 
decryption key or keys from the server. 

20 3. A method according to claim 1or2, charaoterized in 

that the step of finding out the location of the mobile terminal comprises the 
step of requesting the location Infomnatlon From a location service in the net- 
work and as a response to said enquiry the location service transports the 
roquostod location intbrmation to the server. 

25 4. A method according to claim 1 or 2. characterized in 

that the step of finding out the location of the mobile tenninal comprises the 
step of transporting the kication infomnation from a location service in the net- 
work to the server. 

5. A method according to claim 1 or 2, characterized fn 
30 that the step of flndir^ out the iocatton of the mobile tenminal comprises tfie 

step of requesting the location information from the mobile terminal and as a 
response to said enquiry the mobile terminal tnansports the requested ioca- 
Uuri infotmaUun to Uie server. 

6. A method according to daim 1, characterized in that 
35 the step of finding out the location of the mobile terminal comprises tiie st^ 

of requesting tiie location information from a location sen/ice in the network 
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or Irom a mobile terminal and as a response to saW enquiry the location In- 
fotrnatlon is transported to the seiver. which locatton infomnalion the server 
utilizes when automatically matching and sending said deciypflon keys. 

7. A method according to daim 3, characterized in that 
5 the location sendee utilizes the locaMcn intomiatlon ot the mobile temnlnal, 

which Is within the knowledge of the network. 

8. A method according to claim 5, characterized in that 
the mobile lemiinal utilizes the location information of the mobile temiinal, 
Which Is within the knowledge ot the network. 

iO 9. A method according to any of claims 1 - 8, oh aracte r- 

I z e d in ttiat atong with the location Information, Identification Inforniatlon of 
the mobile terminal Is used for matdiing the decrypUon key or keys. 

10. A method accorcling to any ot claims 1 -8, character- 
ize d In that along with the location Infomnalion, time Infonnalion is used for 

1 S matching the decryption key or keys. 

1 1. A method according to any of claims 1 -8, character- 
ize d In that along with the location infonnatlon, identification intonuatlon of 
the mobile terminal and time infonnation are used for matching the decryp- 
tion key or keys. 

20 12. A method according to any of claims 1 -11, character- 

ize d in that decryption keys tor several parts are transported to the mobile 
terminal tor adapting tte mobile tenminal. 

13. A niethod according to any of dalms 1 - 12, character- 
I z o d in that tho adaptation is made for a current use. 
25 14. An arrangement tor adapting a mobile terminal to a use, 

characterized In that the arrangement comprises: 

- a first means for providing the mobile temiinal with data, which 
\6 divided into eeverai parte, each part concerning dato con- 
nected to a certain area, and said data of each part encrypted 
30 by a location specific key, which providing means are con- 

nected to ttie mobile tenfninal forthe duration of the provision, 
location epecrfic decryption loeys in a server, 
< a secorKi means fur finding out a location of Uie mobile temiinal 
in the server, 

35 - a third means In tiie server for comparing the location Informa- 

tion of the mobile temiinal and the location information of said 



■ 

p ■ 
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decryption Keys, and selecting tiiat decryption key whose loca- 
tion Information and the location Information of the mobile ter- 
minal nrmtch, 

- a fourtti means in the server for sending the selected de(»ypfion 
5 key from the server to the mobile terminal through an available 

network as a response of the third means 

- a fifth means in the mobile terminal for decrypting the part using 
the decryption key. 

15. An arrangement according to claim 14, characterized 
10 in that the mobile temninai comprises a sixth means for requesting the de- 

ciyption key or keys from the server. 

16. An orrangomont according to claim 15, charactorizod 
In that the mobile terminal comprises a seventh means Ibr adapung the mo- 
bile temninal for the use. 

15 17. An arrangement according to claim 14 or 16, c h a r a c t e r - 

i z o d In that the second means comprises means for requesting the loca 
tlon information of the mobile terminal from a location service that is in con- 
nection with the server through a communication network, or from the mobile 
terminal, and means for receiving the requested infonriation. 

20 18. An arrangement according to claim I'lor 17, character- 

ize d In that ttie decryption keys are Hirther associated with time informa- 
tion and/or identification information of mobile phones, which is used along 
with the location infonmation when comparing these pieces of infonnation and 
selecting the decryption key. 

26 19. An afiarigetnefil acuoidirig lo any ot daiiiRa 14 - 18, c h a i - 

acterized in that the mobile temiinal Is a field computer, PDA or mobile 
phone. 

20. An arrangement according to any of claims 17, charac- 
l e r i 4£ e U in Urdl Uie focaUuri service uUll^es iucalton inrurinatiuii Trom a 

30 mobile phone network. 

21. An arrangement according to any of claims 14-20, char- 
acterized In that as response to the third means, the fourth means 
sends de«7ptfon keys for several parts for adaptir^ the mobile terminal. 
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(57) Abstract 

The invention relates to an arrangement for adapting a 
mobile field device to a use. Accoitiinsi to Hie Inwenllon, a 
field mol^lle terminal, such as a PDA, Is adapted to a use. 
The mobile temiinal is provided with data, which is divided 
Into several parts. Each part concerns encrypted data 
connected to a certain area, nenrypfinn iceys* are in a .spe- 
cial server. When the decryption of the part is needed, the 
sen/er finds out the location of the mobile terminal. If the 
location Inforniatlon of the mobile temilnal and the location 
inlhrmaUnn of t»ne of said decryption keys match, the rie- 
o,ryption Itey is sent fliom the server to the mobile temtinal. 
The mobile terminal may now decrypt the data part in 
question for adapting the temiinal for the use. 



(Fig. 3) 
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PROVIOIHe MOBILE TERMINAL WITH DATA, WHICH IS DIVIDED 
INTO SEVffiAL PARTS, EACH PART CONCERNINO DATA CONNECTED 
TO CERTAIN AREAr AND SAID DATA OF EACH PART ENCRYPTED BY 
SPECIHCKEYORKEVS 


-51 










HNDINO OUT A LOCATION OF THE MOBILE TERMINAL BY THE SERVER 
THAT COMPRISES DECRYPTION KEYS 










IP HIE LOeAHON OF THE MOBILE TERMINAL AND HIE LOeATlON INPORMATION OF 
ONE OF SAID DECRYPTION KEYS MATCHES, SENDING SAID DECRYPTION KEY FORM 
THE SERVER TO THE MOBILE TERMINAL 












DECRYPTINO THE PART TO WHICH SAID DECRYPTION KEY MATCHES 
FOR ADAPTINO THE MOBILE TERMINAL FOR THE USE 
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